Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7e78ee1-a8e3-32ee-8d2d-0e2effd3325b.roa
File: f7e78ee1-a8e3-32ee-8d2d-0e2effd3325b.roa (raw, json)
Hash identifier: vNUMJkhakoKIDl+84mCNiWPcO58J9D+Wy5S3bX7xJxk=
Subject key identifier: 66:52:4A:18:A6:2C:BD:53:46:9D:0B:F9:7F:F2:5C:2B:54:FD:DC:F5
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858492F87B681E36E2704DA53A600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7e78ee1-a8e3-32ee-8d2d-0e2effd3325b.roa
Signing time: Fri 14 Mar 2025 13:30:16 +0000
ROA not before: Fri 14 Mar 2025 13:30:16 +0000
ROA not after: Thu 12 Jun 2025 13:30:16 +0000
asID: 201754
IP address blocks: 2001:470:427::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2f:87:b6:81:e3:6e:27:04:da:53:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 14 13:30:16 2025 GMT
Not After : Jun 12 13:30:16 2025 GMT
Subject: CN=661f8500-fb47-4e2a-a8f7-323ec0953adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:98:ba:f8:1e:99:4a:f2:ab:d5:5c:7c:6b:b6:
d7:d9:3e:cf:eb:04:f1:48:55:e7:ac:7a:0c:46:c8:
da:d5:98:ea:2a:be:53:5a:3d:0b:c2:85:55:06:42:
8b:a6:20:02:d0:24:5b:30:c3:c1:69:54:26:66:25:
31:31:9e:5f:bb:36:06:82:24:9c:ae:00:c5:fe:07:
89:94:a7:52:53:15:7e:45:66:52:11:9a:14:ec:11:
73:a4:26:39:6c:5b:56:16:ea:f2:da:d8:51:d6:95:
ee:71:3f:40:3c:c3:e3:ea:4f:18:6a:1d:c8:66:9e:
f9:da:7d:f4:99:ae:ff:bd:03:07:6a:94:a5:67:d3:
e1:f7:92:e8:6d:53:64:46:b3:3e:62:c8:0e:50:6b:
05:b9:08:a0:44:37:5c:3c:bd:79:ea:df:b3:97:c1:
0f:19:3d:bd:55:9b:56:0d:7b:d9:da:20:63:cf:42:
f9:69:3b:3a:9f:20:13:38:c6:c0:73:92:b2:be:67:
a9:cf:f6:04:c9:e0:f2:56:56:0c:53:f9:59:e9:94:
b8:c7:21:b4:60:54:c4:33:6f:aa:d6:c2:50:a1:d9:
0c:95:25:32:af:57:c5:2f:53:3a:8a:d8:90:0b:74:
e7:8d:27:df:25:e4:81:63:a1:0c:30:53:c2:aa:b3:
13:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:52:4A:18:A6:2C:BD:53:46:9D:0B:F9:7F:F2:5C:2B:54:FD:DC:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7e78ee1-a8e3-32ee-8d2d-0e2effd3325b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:427::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:a5:f2:4e:bb:89:9d:81:7c:6d:bd:3f:ac:37:49:a7:01:72:
28:3b:c2:cf:43:cf:ca:f3:ad:d4:49:6f:3b:b2:0c:99:50:c1:
47:cb:7a:6c:42:dc:e4:e5:3d:dc:3c:f4:0f:60:6f:8e:e1:af:
6f:87:95:10:ff:f7:75:f5:6a:37:6d:cb:92:fa:b2:51:e9:a4:
ea:75:79:ed:3b:27:7f:96:38:e9:f4:ab:b4:79:28:b2:f6:84:
15:14:03:a8:67:6e:95:1e:69:7a:d9:d7:19:66:35:18:fe:34:
90:c5:cd:65:6e:ba:da:73:e4:fb:8b:bc:89:8b:e2:0b:2f:d5:
a0:c0:cb:e7:44:94:2c:c8:d7:58:80:f8:45:2c:6a:74:ed:17:
6b:9d:3b:cf:3f:21:55:fb:d5:13:84:dc:67:36:c8:60:5b:f0:
11:8f:60:ff:01:e2:1c:df:bd:d9:a4:2f:3e:43:f5:6c:d9:c1:
30:1b:63:dd:e8:c5:51:93:f5:e7:e3:70:b8:6d:c1:0c:54:9b:
a7:26:ee:3b:9a:62:57:1b:9c:33:6e:de:0f:a4:30:5d:6f:7f:
a1:d9:c6:40:8d:28:19:28:2e:25:c4:4c:97:e1:cd:69:ba:15:
d1:43:44:d0:f7:6e:47:01:43:34:ca:dd:38:13:ae:29:ed:83:
95:86:7b:84
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkvh7aB424nBNpTpgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDMxNDEzMzAxNloXDTI1MDYxMjEzMzAxNlowLzEtMCsGA1UEAxMk
NjYxZjg1MDAtZmI0Ny00ZTJhLWE4ZjctMzIzZWMwOTUzYWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5i6+B6ZSvKr1Vx8a7bX2T7P6wTxSFXnrHoM
Rsja1ZjqKr5TWj0LwoVVBkKLpiAC0CRbMMPBaVQmZiUxMZ5fuzYGgiScrgDF/geJ
lKdSUxV+RWZSEZoU7BFzpCY5bFtWFury2thR1pXucT9APMPj6k8Yah3IZp752n30
ma7/vQMHapSlZ9Ph95LobVNkRrM+YsgOUGsFuQigRDdcPL156t+zl8EPGT29VZtW
DXvZ2iBjz0L5aTs6nyATOMbAc5Kyvmepz/YEyeDyVlYMU/lZ6ZS4xyG0YFTEM2+q
1sJQodkMlSUyr1fFL1M6itiQC3TnjSffJeSBY6EMMFPCqrMTXwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGZSShimLL1TRp0L+X/yXCtU/dz1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjdlNzhlZTEtYThlMy0z
MmVlLThkMmQtMGUyZWZmZDMzMjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHql8k67iZ2BfG29P6w3SacBcig7ws9Dz8rzrdRJbzuyDJlQwUfL
emxC3OTlPdw89A9gb47hr2+HlRD/93X1ajdty5L6slHppOp1ee07J3+WOOn0q7R5
KLL2hBUUA6hnbpUeaXrZ1xlmNRj+NJDFzWVuutpz5PuLvImL4gsv1aDAy+dElCzI
11iA+EUsanTtF2udO88/IVX71ROE3Gc2yGBb8BGPYP8B4hzfvdmkLz5D9WzZwTAb
Y93oxVGT9efjcLhtwQxUm6cm7juaYlcbnDNu3g+kMF1vf6HZxkCNKBkoLiXETJfh
zWm6FdFDRND3bkcBQzTK3TgTrintg5WGe4Q=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:44:14 2025 by rpki-client